Packages

guardian

2.4.1
2.4.1 2.4.0 2.3.2 2.3.1 2.3.0 2.2.4 2.2.3 2.2.2 2.2.1 2.2.0 2.1.2 2.1.1 2.0.0 1.2.1 1.2.0 retired 1.1.1 1.1.0 1.0.1 1.0.0 1.0.0-beta.1 1.0.0-beta.0 0.14.6 0.14.5 0.14.4 0.14.3 retired 0.14.2 0.14.1 0.14.0 0.13.0 0.12.0 0.11.1 0.10.1 0.10.0 0.9.1 0.9.0 0.8.1 0.8.0 0.7.4 0.7.2 0.7.1 0.7.0 0.6.3 0.6.2 0.6.1 0.6.0 0.5.2 0.5.0 0.4.1 0.4.0 0.3.1 0.3.0 0.2.0 0.1.1 0.1.0

Elixir Authentication framework

HexDocs

Current section

4 Advisories

Jump to
Readme
54 Versions
2 Dependencies
37 Dependants
4 Advisories
Files
Activity
EEF-CVE-2026-55734 CVE-2026-55734 GHSA-9qx2-v587-q3gg

guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1

August 01, 2026
CVSS
?
6.9 / 10.0 Medium
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Affected Versions

>= 2.0.0 and < 2.4.1
EEF-CVE-2026-55733 CVE-2026-55733 GHSA-fjr5-7xrc-hmpj

Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

August 01, 2026
CVSS
?
6.9 / 10.0 Medium
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Affected Versions

>= 2.0.0 and < 2.4.1
EEF-CVE-2026-54894 CVE-2026-54894 GHSA-xqch-c77q-rgh5

Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

August 01, 2026
CVSS
?
6.9 / 10.0 Medium
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Affected Versions

>= 0.1.0 and < 2.4.1
EEF-CVE-2026-55735 CVE-2026-55735 GHSA-7975-hp3r-5qhv

Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation

August 01, 2026
CVSS
?
8.2 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 1.0.0 and < 2.4.1

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 2K 4K 6K 8K

this version

66

yesterday

2 505

last 7 days

50 555

all time

16 036 902

Last Updated

Aug 01, 2026

License

MIT

Build Tools

mix

Publisher

hanspagh hanspagh

Links

Owners